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Field of Invention HuvudWn Kosson 

The present invention pertains to a method and a system for identifying a juridical 
person in order to provide said juridical person access to a service such as payment transaction, 
facility acces s transaction etc . 

Background Art 

In a GSM based payment system, a consumer can pay for a purchase-using his/her 
GSM phone. The consumers phone bill is then debited the purchase amount. 

Technical realisation of such payment system requires from the consumer nothing but 
an ordinary GSM telephone. 

One of the weakest points of this implementation is the control of credit worthiness of 
the consumer. A consumer who has e.g. not paid his/her phonebill during the past half year is 
an unwanted entity in the payment scheme. Therefore, GSM based payment schemes have only 
been implemented for very small payment amounts so far, e.g. m soda machines. This to reduce 
the financial risks. 

Advertisements nowadays are eitonon-targeted or-tben they are^non,automised. Today 
advertising can be targeted and automated to varying.degr^s depending on the medium. 

Mass media (TV-radio, pjin^outdop^is not very targetej;-detiyering advertising 

messages to, at bew*t,co»eJjHo^ 

p ap er<cou F ons.ean*beused to drive purchases,^ are expensive to administer and 

tend to lead to "price-shoppers^ ; 

The Internet ha Sl opened4ip ©pportumries^bener^ge For 
example, the on-line book retailer "amazon.com" uses past individual shopping behavior to 
provide recommendations based on what other people with similar shopping patterns have 
purchased. Such recommendations do however not provide individuals with specific offers That 
i are not available to others and do not reach people shopping in the physical world. 

In US Patent No. 5,590,l97there is disclosed a cyber wallet in the form of stored and 
protected account information, which may be "carried" on a tamper resistant portable electronic 
storage medium such as a smancard. or stored on the customer's computer (or personal digital 
assistance, PCMCIA card, or the like) togethe*wiih the browser/mosaicsoftwat^is provided 
D to a customer for the puipose of makmg,eleotronic paymeots*omme,possessor of the wallet to 
a merchant at a remote site-on the Internet : Seeurmg^^ 

is provided by apublic key file containing public keys-to be usedrfoaenciypting,the payment 
information into an authorisation ticket which is sent by the wallet to the merchant, and then 
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forwarded to ihe account servicer for decryption, the decryption key being in the form of a 
private key held only by the account servicer, and to which the merchant and other parties have 
no access. The public key file preferably contains a plurality of public keys selectable by an 
identifier associated with but not a part of the key itself, so that the account servicer can 
5 control, by having the merchant send an identifier to the wallet, the selection of 

uncorapromiscd keys without anyone but the servicer having knowledge of which key is being 
selected. This solution is rather complicated 

Summary of the disclosed invention 
The present invention relates to a method and a sysrem for providing access to a 
10 service such as a payment access transaction, a facility access transaction, membership access, 
bonus or loyalty scheme access etc. 

An aspect of the invention is to solve problems related to an automatic payment 
transaction through for example a mobile phone system such as the GSM or, or other 
Telephone like communication device, further referred to as telephone device. 
15 Another aspect of the present invention provides a door passage inlet, the door 

having no keypad or other physically accessing means from outside the facility. 

Yet another aspect of the present invention is to make called telephone numbers 
decide which service is asked for among a plurality of services. 

The aspects are accomplished through CLl-number recognition when 
20 establishing a call and not letting the call being received through off-hook detection by a 
called party. 

A method for identifying a juridical person in order to provide said juridical 
person access to a provided service is thus set forth through the present invention. It 
comprises the retrieval of the CLI-number provided to a telephone device used by said 
25 juridical person. The CLl-number being part of the phone communication protocol and being 
retrieved at a service unit telephone device or a clearing unit telephone device, respectively, 
during a phone call connection trial without establishing the communication, whereby the call 
is refused ax the service unit or the clearing unit, respectively, which are adapted to refuse a 
call. The service unit establishes a communication to a clearing unit which always decides if 
30 the received CLI-number has access to the service provided, thus providing the service if 
access is established 

In one embodiment of die invention the service is a payment transaction. 

In another embodiment of the present invention the service is a facility access 

transaction* 
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H^fiSw- comprises thai a service category called for is dependent on 
the telephone number dialed, i.c., me service, e g. payment or facility access, depict U 
dependent on the dialed telephone number 

A further embodiment comprises that a facility access does not have any 
5 physically aceessible^ocldng means from outside thefacility for emeringrfhe facility. The 
service unit is attached inside the facility in another embodiment, thus preventing vandahzmg. 
An insade attachment prevents a person from noticing the existence of means forentenng the 
facility from the outside of it in one embodiment of the invention. 

A still further embodiment comprises that the clearing unit checks if the 
10 received CLI-number is stored in a connected computer database. If so, looking for 

information corresponding to said CLI-number, and If the CLI-number is stored in me 
computer database and if the related mfonnanon qualifies the user of that CU-number to have 
access to the said service, the clearing unit sends an access confirmation to the serv.ee unit. 

Yet another embodiment comprises that the user is notified to his/her telephone 
15 device of a service. A notification is, in one embodiment transmitted via an SMS message or 
the like fronuhe serviced or mexlearing^rit. which thus comprise a GSM-means or the 

lijce for transimsrioniOf thcSMS. v 

Further the,prcsent invention sets. forth a system for idenrifying^juridtcal 
person in orde»to,provide.said juridical per*on S access,tp a 9 provided,se^ce- It comprises: 
20 a telephone device^with a CLI-number, the device being*allocaied to saw 

person, and said CLI-number being pan of me phone communication protocol? 

a service unit device and a clearing unit device, being4£onnecjed,to a computer 
database, which decides if the received CLI-number has access to the service provided, 
whereby at least one of them comprises a unit telephone device to be called by said person 

25 with said telephone; . 

retrieval means at the service unit or the clearing unit for the CLI-number durmg 
: ! : a phone call connection trial, being adapted not to establish the. whereby a call is refused at 

the unit telephone device; and 
: - ' ! said service unit providing the service if access is granted. 

T.". : 30 Further embodiments of the present invention are set forth^through attached 

;**- ■] dependent claims, which include that the above system is ableto perfom,embodiments of the 

. • • • . method.dcscribcd*abover 

Brief Deicription of the Drawings 
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H uvuofcxe Henceforth reference is had to the accompanying drawings for a better understanding of 
The present invention with its provided examples and embodiments, wherein: 
Fig. 1 illustrates a block diagram of an authorization system; 
Fig. 2 illustrates a schematic exemplification of a specific application of an 
5 authorization system; 

Fig. 3 illustrates a flow chart of a method for giving authorization regarding payment 
from a consumer to a retailer; 

Fig. 4 illustrates a schematic exemplification of a specific application of a targeted 
automated advertisement system; 
10 Fig. 5 illustrates a schematic block diagram of one embodiment of the present 

invention for the authentication and identification of a user to provide said user access to a 
specific service; 

Fig. 6 illustrates a schematic block diagram of another embodiment of the present 
invention for the authentication and identification of a user to provide said user access to a 
15 specific service; 

Fig. 7 illustrates a schematic block diagram of a further embodiment of the present 
invention authentication and identification of a user to provide said user access to a service; 

Fig. 8 illustrates a schematic block diagram of yet another embodiment of the present 
invention for the authentication and identification of a user 10 provide said user access to a 
20 specific service; 

Fig. 9 illustrates a schematic block diagram based on the embodiments according to 
Fig. 5 to Fig. 8 depicting a specific service in a payment system; and 

■1 

Fig. 10 illustrates a schematic block diagram based on the embodiments in 
accordance with Fig. 5 to Fig. 8 and explains a specific service regarding a facility access 
25 system * 

Description of Preferred Embodiments 

The attached Fig. 1 to Fig- 4 and the accompanying text of the present invention 
relate to the Swedish patent application 9902768-2 filed July 20, 1999. 

In Fig 1, there is disclosed an authorization system 10. The system 10 comprises at 
30 least one source unit 12 and at least cine destination unit 14u .. ., IV The system 10 can 
comprise, but not necessarily, a communication means 16 for communication between said 
source unit 12 and said destination units 14i, ...» 14il Said system 10 also comprises an 
authorization unit 1 8 and communication means 20 for comraunicati n both between said 
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HoVU ^«JH^ii<m unit 18 and said source unit 12 and said authorization unit 18 and said 

destination units 14! 14 0 . Said authorization unit 18 comprises a memory means 22, in 

which there is stored validity information about said at least ne source unit 12. Said 
authorization unit 18 checks the validity information before a decision is made whether said 
5 source unit gets authorized to perform-said specifictask. Said memory means 22 can e.g. be in 
form of a data base 22. Said system 10 also comprises a clearinganeans 24 connected to said 
authorization unit 1 8. Said clearing means 24 ensures and/or executes any payment 
transaction between e.g. a consumer and a retailer with or without the usage of any 
middleman. 

10 It is hereby pointed out that in this application the expression consumer means 

anyone who is paying and the expression retailer means anyone who is receiving money in a 
payment scheme. 

Any of the said communication means 16, 20 can e.g. be optical or infrared 
communication links, electronic bus system, or mobile communication means. 
15 Any of the said mobile communication means can e.g. be microwave communication 

means, radio-commumcation means, or based on the NMT.GSM, or WCDMA standard. 
Any of me.said,communication.means ul6, 20 can also be telephone means, or be 

based on the Internet standard?* 

According to one embodiment, saidsource unit^ is designated to aspecific 

20 consumer and each destinaiion-unit 14,. .... 14,. is a point of sale- unit (P.O.S)*Said system 10 
comprises also a to said memory means 22 connected clearing means 24. In Embodiment one 
said validity information comprises the credibihty of each consumer. Said, authorization unit 
1 8 uses the credibility of each consumer and payment data received from a point of sale unit 
14l I4n as a base for taking the decision whether payment is approved or not. When said 

25 payment is approved, said point of sale unit 14, 14n delivers any kind of purchase proof 

for said retailer of interest and/or for said consumer. This purchase proof can e.g. be a cash 

• ticket. 

• . According to another embodiment, which is based on the previous embodiment, said 

system 10 comprises also an advertisement system 26 connected to said memory means 22. In 
: -" 3 o Embodiment two said validity-information comprises ^formation about advemsement 

coupled financial benefits of each consumer. Said authorization unit 18 uses the information 
about advertisement coupled-finaiurialbcnefitsiof each consumer ^ 
' " from a point of sale unit 14, 14n as a base for taking the decision whether payment is 
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approved or not and whether a financial benefit has to be taken into account by the clearing 
means 24. 

According to yei another embodiment, each of said source unit 12 is designated to a 
specific machine user and each destination unit 14i, . . ., 14n is a single component in a 
5 specific machine. Said validity information comprises the state of each said component and 
data about each said machine user. 

In Fig 2 there is disclosed a specific application of an authorization system. 
It relates to a method of authorization in communication schemes in which a 
particular source communicates with a particular entity (destination) that is part of a 
10 distributed system- First a short explanation of the above terms. 
The communication scheme: 

This is a particular application where a certain communication between source and 
destination is wanted and which requires some kind of authorization 
Some examples of such distributed systems are: 
15 - Electronic parking meters, paid using the driver's mobile phone 

A machine, in which e.g. every single component in the machine can be controlled in 
a remote way by one or different machine users. 

A remote (Internet/ telephone/GSM) control system for electronic equipment in a 
building or more specifically a house (cf. the bluetooth communication standard) 
20 An electronic payment system 

A targeted publicity system 

Components, connected by an electronic bus system 

Vending machine, paid using the purchaser's mobile phone. 

The physical information carrier for the communication can be of any kind: 
25 telephone, all mobile communication systems (NMT, GSM, WCDAM, radio, microwave 
communications, infra red communications ...), optical communication links, the Internet, 
any kind of electronic (computer-) bus system, .... 

In Fig 3 there is disclosed a flow chart of a method for giving authorization regarding 
payment from a consumer to a retailer. The method begins at block 40. Thereafter, at block 42, 
30 the method continues in that said consumer dials, e.g. using his/her GSM telephone, a payment 
identification, e.g. a specific GSM number, for a retailer of interest, wherein an authorization 
unit receives said payment identification for said retailer of interest and said consumers 
identification, e.g. by retrieving the consumer's GSM number and the specific GSM payment 
number from the consumer's telephone call without opening a telephone connection. The method 
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is the same as the memory means 22, and the advertisement messages are in the form of SMS 
messages. 

Specifically the present invention provides a system for the authentication and 
identification of a user to provide said user access to a service. It is based on the retrieval of 
5 the so called*CU-number«(clearing number), sometimes named A-number (calling party). 
The CLI-number is a number that is part of the phone communication protocol and which can 
be retrieved by the receiver of a telephone call without having to open the established call 
connection. Such a refusal of opening a telephone connection line is accomplished by 
adapting a destination telephone device, such as a modem, telephone, mobile phone etc. A 
10 telephone device can be adapted by activating a specific switch, or by programming the 
device. 

The system comprises at least four sub-systems, which are the user, the service unit, 
the clearing unit and a computer database. Optionally it can include an additional 
identification unit or an additional computer database. 
15 A user is any juridical person or any technological device that can send a telephone 

signal via an interface, for example, a GSM telephone or the, like. 

Said service unit has access/to at least.one processing unit and communication means 
with the. clearingiimi^$uch:as a telephp unit is the clement that is 

providing ^serviceiresponse«to.a user. rlt oamalso comprise^a keyboard or keypad for 
20 additional input of data«such as PIN code. A place for a service unit to be situated could be a 
shop or any other place where a sale or money transfer-is taking place. 

The clearing unit comprises at least one processor unit. It can be situated, for 
example, at a bank or other financier facilities. 

Said computer database and the additional computer database comprises at least 
25 information related to the provided service and to the users having access to the service. 
A possible additional identification unit can comprise means of biometric or electronic 
identification, e.g. fingerprint recognition or PIN-code recognition. 

In an embodiment of the present invention illustrated in Fig. 5, the user 80 is calling 
a phone number, which corresponds to the phone number of a modem in the service unit 82. 
" : 30 The service unit 82, without establishing a communication, retrieves 84 the CLI- 

: number of the user and refuses the call The CLI-number is then transferredt86 to the clearing 

: unit 8 8 by-means of co ramunication- knownon the*m**Said«elearing*uiut~88 checks if the 

received CLI-number is stored in the computer database 90 and if so, looking for 92 
' : infonnati n corresponding to said CLI-number. If the CLI-number is stored in the computer 



database and if the related information qualifies the user of that CLI-number to have access t 
the said service, the clearing unit sends an access confirmation 94 to the service unit 82 by- 
means of communication known in the an. The service is then provided to the user by the 
service unit 82. The clearing unit 88 can optionally send information related to the service to 
5 the user, for example, confirmation of a successfully provided service by means of 

communication 96, for example, GSM telephone or the like by sending an SMS message 
(Short Messages Services) to the user or a print out if the service unit 82 comprises a printer- 

Another embodiment of the present invention is illustrated in Fig. 6, based on the 
embodiment illustrated in Fig. 5 and being identical to the embodiment in accordance with 

10 Fig. 6, except that an additional identification unit 100 is added. The service is only provided 
if the service unit 82 receives the access confirmation 94 and if the user is identified 102, 104 
by the additional identification unit 100. 

In yet another embodiment illustrated in Fig. 7, the clearing unit 14 comprises at 
least one modem. The user 80 is calling a phone number which corresponds to the phone 

15 number of the modem of the clearing unit. The clearing unit 88, without establishing the 

communication, retrieves the CLI-number 106 of the calling device, whereby the clearing unit 
88 checks if the received CLI-number is stored in the computer database 90 and if so, looking 
for information 92 corresponding to the said CLI-number. If the CLI-number is stored in the 
computer database 90 and if the related information qualifies the user of that CLI-number to 

20 have access to the said service, the clearing unit 88 sends an access confirmation 94 to the 
service unit 82 by said means of communication. A requested service is then provided to the 
user by the service unit 82. The clearing unit can optionally send 96 information related to the 
service to the user, for example, confirmation of a successfully provided service by means of 
communication such as a GSM telephone or the like. The service unit can optionally send 98 

23 a print out of a receipt. 

Still another embodiment of the present invention illustrated in Fig* 8, based on the 
embodiment according to Fig. 7 and being identical to it except for an additional identification 
unit 100 added. The service is only provided if the service unit 82 receives access 
confirmation 94 and if the user is identified 102, 104 by die additional identification unit 82. 

30 A further embodiment of the present invention is based on any of the previous 

embodiments and illustrated in Fig. 9. In this embodiment one possible service is described 
more in detail Tho present invention provides a service regarding a payment from one party, 
i.e., the user 80, to another third party 108, for example, a retailer. In this embodiment, die 
service unit 82 further includes means for receiving 1 10 the amount of money the user owes 
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to the third party 108, e.g. via a keyboard or via an electronic interface to a cash box. If the 
access confirmation 94 is delivered to the service unit 82 and if, optionally, the user is 
identified by the additional identification unit 108, the service unit 82 transfers 112 the 
amount of money the user owes to the third party 1 08 to the clearing unit 88 communication. 
5 The clearing unit 88 stores 1 14 the amount of money in the computer database 90. The 
amount of money is then invoiced to the user 80. 

A still further embodiment of the present invention is based on any of the 
previous embodiments and illustrated in Fig. 10. In this embodiment one possible service is 
described more in detail. The present invention provides a service regarding the access of the 
10 user 80 to a facility, for example, the present invention provides the key to access a protected 
room. If the access confirmation 94 ie delivered to the service unit 82, the service unit 82 
sends an unlock signal 1 16 to the locked door lock 118. Subsequently, Tie door is unlocked by 
known electrical or mechanical means and the user 12 has access to the facility. The present 
invention provides increased security compared to standard, physical keys. Firstly, as soon as 
15 the user loses his phone and the corresponding CLI-number, the CTJ-number can be 

withdrawn from the access list to the*fecility and, secondly, the phone number the user has to 
call to ra order to get access, can be kept secret. This means that, even if theitiser loses his 
phone, a burgl|r^sri&does»not^ kno wing the phone number 
to call. Funhermoreranyamechanical, electrical or electronic*means:giving access to the 
20 facility on the outside'of the^facihtyi for example, keypads for code entries are not necessary 
anymore. The present inventions physical means can all be installed inside-the facility to be 
entered, which reduces considerably ihc risk of destruction of the access means. The inside 
attachment also can prevent a person from noticing an alarmed facility . 

Another embodiment of the present invention is based on embodiments in 
25 accordance with Fig. 5 to Fig. 8. hi this embodiment one possible service is described more in 
detail. The present invention provides a service regarding the purchase of a ticket, for 
example, to access a cinema, a museum, a theatre, a train etc. In this embodiment, the phone 
number the user 80 is calling is related to the kind of ticket the user would like to purchase, 
for example, which movie the user 80 would like to see. The clearing unit 88 communicates 
30 by means of communication with the computer database 90 which containsithe^infimnation of 
the availability of the ticket the user wishes to purchase. Jf the access confirmation 94 is 
delivered'to the service^unit*82 and^if the clearing«unit»88 «tricv««the^informationwfrom the 
computer database 90 that there is at least one ticket left to be purchased, and if, optionally, 
the user is identified by the additional identification unit 1 00 the clearing unit 88 stores the 



-03-00 17:21 FRAN—STpCKHOLMS 

- • 11 

H JV pri2e of the ticket, which is relaxed to the number the user 80 called in die computer database 
90 in a field thai corresponds to the retrieved CLI-numbcr. The amount of money is then 
invoiced to the user 80, and the computer database 90 is updated to the number of tickets left 
to be purchased. 

5 It is appreciated that the means mentioned above can be software means or a 

combination of software and hardware means known in the an per se, but not in the way they 
are used or provided in the present invention. 

It should be understood that the invention is not restricted to the aforedescribed and 
illustrated exemplifying embodiments thereof; and that modifications can be made within the 
10 scope of the following Claims. 
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Claims 

Huvudfecan Kctson 

1 . A method for identifying a juridical person (80) in order to provide said 
juridical pers n access to a provided service, characterized in that it comprises the retrieval 
of the CLI -number provided to a telephone device allocated to said juridical person (80), the 

5 CLI-number-being.a part of the phone communication protocol and being retrieved at a 
service unit telephone device (82) or a clearing unit (88) telephone device, respectively, 
during a phone call connection trial (84), said units (82, 88) being adapted not to establish the 
communication, whereby the call (84) is refused ax the service unit (82) or the clearing unit 
(88), respectively, if the service unit (82) refuses the call it communicates to the clearing twit 
10 (88) which always decides if a received CLI-number has access to the service provided, thus 
providing the service if access is established. 

2. A method according to claim 1, characterized in that the service is a 
payment transaction. 

3. A method according to claim 1, characterized in that the service is a facility 
IS access transaction. 

4. A method according to claim 1-3, characterized in that a service category 
called for is dependent on the telephone number dialed ^ 

5. A method -according to claims 3, characterized^ thaMherfacility access does 
not have any physically^accessible locking means from outside the faciUty^for*entcring the 

20 fecility^ 

6. A method according to claims 1-5, characterized in that thc<clearing unit 
(88) checks if the*recdved M CU~number is stored-in a connected*computer database (90) and if 
so, looking for (92) information corresponding to said CLI-number, and If the CLI-number is 
stored in the computer database and if the related information qualifies the user (80) of that 

25 CLI-number to have access to the said service, the clearing (88) unit sends an access 
. * : confirmation (94) to the service unit (82). 

: 7. A method according to claims 1-6, characterized in that the user is notified 

•J to his telephone device of a service. 

8. A method according to claim 7, characterized in that a notification is 

30 transmittedovia an SMS message or the like from the service unit«or theiolearing unit, which 
* * : thus comprise a GSM means or the like for transmission of therSMS. 

9. A system for identifying^ juridicalspcrson (80)tih ordcr^to provide said 
" ": juridical person access to a provided service, characterized in that it comprises: 
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n a telephone device with a CLI-number, the device being allocated to said person 

(80), and said CLI-number being pan of the phone communication protocol; 

a service unit device (82) and a clearing unit device (88), being connected to a 
computer database (90), which decides if the received CLI-number has access to the service 
5 provided, whereby at least one of them comprises a unit telephone device to be called by said 
person (80) with said telephone; 

retrieval means at the service unit (82) or die clearing unit (88) for the CLI- 
number during a phone call connection trial, being adapted not to establish die 
communication, whereby a call is refused ax the unit telephone device; and 
10 said service unit (82) providing the service if access is granted. 

10. A system according to claim 9. characterized in that the service is a 
payment transaction. 

11. A system according to claim 9, characterized in that the service is a facility 
access transaction. 

15 12. A system according to claim 9-1 1, characterized in that a service category 

called for is dependent on the telephone number dialed. 

13. A system according to claim 11, characterized in that the facility access 
does not have any physically accessible locking means from outside the facility for entering 
the facility. 

20 14. A system according to claims 9-13, characterized in that the clearing unit 

(88) checks if the received CLI-number is stored in said connected computer database (90) 
and if so, looking for (92) information corresponding to said CLI-number, and If the CLI- 
number is stored in the computer database and if die related information qualifies the user 
(80) of that CLI-number to have access to the said service, the clearing (88) unit sends an 

25 access confirmation (94) to the service unit (82). 

15. A system according to claims 9-14, characterized in that the user is notified 
to his telephone device of a service, 

16, A system according to claim 1 5, characterized in that a notification is 
transmitted via an SMS message or the like from the service unit or the clearing unit, which 

30 thus comprise a GSM means or the like for transmission of the SMS. 
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